demarches-normaliennes/spec/controllers/administrateurs/jeton_particulier_controller_spec.rb

128 lines
4.4 KiB
Ruby
Raw Normal View History

describe Administrateurs::JetonParticulierController, type: :controller do
let(:admin) { create(:administrateur) }
let(:procedure) { create(:procedure, administrateur: admin) }
before do
stub_const("API_PARTICULIER_URL", "https://particulier.api.gouv.fr/api")
sign_in(admin.user)
end
describe "GET #api_particulier" do
render_views
subject { get :api_particulier, params: { procedure_id: procedure.id } }
it do
is_expected.to have_http_status(:success)
expect(subject.body).to have_content('Jeton API particulier')
end
end
describe "GET #show" do
subject { get :show, params: { procedure_id: procedure.id } }
it { is_expected.to have_http_status(:success) }
end
describe "PATCH #update" do
let(:params) { { procedure_id: procedure.id, procedure: { api_particulier_token: token } } }
subject { patch :update, params: params }
context "when jeton has a valid shape" do
let(:token) { "d7e9c9f4c3ca00caadde31f50fd4521a" }
before do
VCR.use_cassette(cassette) do
subject
end
end
context "and the api response is a success" do
let(:cassette) { "api_particulier/success/introspect" }
2021-09-21 11:01:04 +02:00
let(:procedure) { create(:procedure, administrateur: admin, api_particulier_sources: { cnaf: { allocataires: ['nomPrenom'] } }) }
it 'saves the jeton' do
expect(flash.alert).to be_nil
expect(flash.notice).to eq("Le jeton a bien été mis à jour")
2021-11-24 17:30:35 +01:00
procedure.reload
expect(procedure.api_particulier_token).to eql(token)
expect(procedure.api_particulier_scopes).to contain_exactly(
'cnaf_adresse',
'cnaf_allocataires',
'cnaf_enfants',
'cnaf_quotient_familial',
'dgfip_adresse_fiscale_annee',
'dgfip_adresse_fiscale_taxation',
'dgfip_annee_impot',
'dgfip_annee_revenus',
'dgfip_date_etablissement',
'dgfip_date_recouvrement',
'dgfip_declarant1_date_naissance',
'dgfip_declarant1_nom',
'dgfip_declarant1_nom_naissance',
'dgfip_declarant1_prenoms',
'dgfip_declarant2_date_naissance',
'dgfip_declarant2_nom',
'dgfip_declarant2_nom_naissance',
'dgfip_declarant2_prenoms',
'dgfip_erreur_correctif',
'dgfip_impot_revenu_net_avant_corrections',
'dgfip_montant_impot',
'dgfip_nombre_parts',
'dgfip_nombre_personnes_a_charge',
'dgfip_revenu_brut_global',
'dgfip_revenu_fiscal_reference',
'dgfip_revenu_imposable',
'dgfip_situation_familiale',
'dgfip_situation_partielle',
'pole_emploi_identite',
'pole_emploi_adresse',
'pole_emploi_contact',
2021-12-15 15:25:02 +01:00
'pole_emploi_inscription',
'mesri_identifiant',
'mesri_identite',
'mesri_inscription_etudiant',
'mesri_inscription_autre',
'mesri_admission',
'mesri_etablissements'
2021-11-24 17:30:35 +01:00
)
expect(procedure.api_particulier_sources).to be_empty
end
end
2021-09-16 09:09:26 +02:00
context "and the api response is a success but with an empty scopes" do
let(:cassette) { "api_particulier/success/introspect_empty_scopes" }
it 'rejects the jeton' do
2022-12-01 13:41:12 +01:00
expect(flash.alert).to include("le jeton na pas acces aux données")
expect(flash.notice).to be_nil
expect(procedure.reload.api_particulier_token).not_to eql(token)
end
2021-09-16 09:09:26 +02:00
end
context "and the api response is not unauthorized" do
let(:cassette) { "api_particulier/unauthorized/introspect" }
it 'rejects the jeton' do
2023-06-08 10:03:34 +02:00
expect(flash.alert).to include("Mise à jour impossible : le jeton na pas été trouvé ou nest pas actif")
expect(flash.notice).to be_nil
expect(procedure.reload.api_particulier_token).not_to eql(token)
end
end
end
2021-09-16 09:09:26 +02:00
context "when jeton is invalid and no network call is made" do
let(:token) { "jet0n 1nvalide" }
before { subject }
it 'rejects the jeton' do
expect(flash.alert.first).to include("pas le bon format")
expect(flash.notice).to be_nil
expect(procedure.reload.api_particulier_token).not_to eql(token)
end
end
end
end